La API de verificacion de identidad mas completa de Europa

// 1. Create verification session (server-side)
const res = await fetch('https://your-domain.com/api/v1/sessions', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer kyc_your_api_key',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ external_ref: userId }),
});
const { verification_url } = await res.json();
// Redirect the user to verification_url

// 2. Receive result via webhook
app.post('/webhook/kyc', express.raw({ type: 'application/json' }), (req, res) => {
  const sig = req.headers['x-kyc-signature'];
  const mac = 'sha256=' + require('crypto')
    .createHmac('sha256', process.env.KYC_WEBHOOK_SECRET)
    .update(req.body).digest('hex');

  if (sig !== mac) return res.sendStatus(401);

  const { external_ref, status, aml_status } = JSON.parse(req.body);
  if (status === 'approved' && aml_status === 'clear') {
    activateAccount(external_ref);
  }
  res.sendStatus(200);
});